Browse CVEs

MEDIUM 6.5 CVE-2022-39281 fat_free_crm is a an open source, Ruby on Rails customer relationship management platform (CRM). In versions prior to 0.20.1 an authenticated user ca… Fatfreecrm 0.20.1+ Fix from $1,6002022-10-08 MEDIUM 6.1 CVE-2018-20975 Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb. Fat Free Crm 0.18.1+ Fix from $1,6002019-08-20 MEDIUM 5.4 CVE-2019-10226 HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to the /comments URI. NOTE: the ve… Fat Free Crm No fix yet Fix from $1,6002019-06-10 MEDIUM 6.1 CVE-2018-1000842 FatFreeCRM version <=0.14.1, >=0.15.0 <=0.15.1, >=0.16.0 <=0.16.3, >=0.17.0 <=0.17.2, ==0.18.0 contains a Cross Site Scripting (XSS) vulnerability in… Fatfreecrm after 0.17.2 Fix from $1,6002018-12-20 MEDIUM 6.8 CVE-2015-1585 Fat Free CRM before 0.13.6 allows remote attackers to conduct cross-site request forgery (CSRF) attacks via a request without the authenticity_token,… Fat Free Crm after 0.13.5 Fix from $1,6002015-02-19 MEDIUM 6.8 CVE-2013-7223 Multiple cross-site request forgery (CSRF) vulnerabilities in Fat Free CRM before 0.12.1 allow remote attackers to hijack the authentication of unspe… Fat Free Crm after 0.12.0 Fix from $1,6002014-01-02 MEDIUM 6.5 CVE-2013-7225 Multiple SQL injection vulnerabilities in app/controllers/home_controller.rb in Fat Free CRM before 0.12.1 allow remote authenticated users to execut… Fat Free Crm after 0.12.0 Fix from $1,6002014-01-02 MEDIUM 5.0 CVE-2013-7222 config/initializers/secret_token.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secret_token value, which makes it easie… Fat Free Crm after 0.12.0 Fix from $1,6002014-01-02 MEDIUM 5.0 CVE-2013-7224 Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, … Fat Free Crm after 0.12.0 Fix from $1,6002014-01-02 MEDIUM 5.0 CVE-2013-7249 Fat Free CRM before 0.12.1 does not restrict XML serialization, which allows remote attackers to obtain sensitive information via a direct request, a… Fat Free Crm after 0.12.0 Fix from $1,6002014-01-02